This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

User-ID 4.1.2-2 and Exchange

I am attempting to gather user to IP mapping for exchange users with User-ID agent 4.1.2-2. I am accessing our exchange server using the iphone mail app, but no information is for my IP address. I know there is a known issue logging IMAP or POP3 users, is there an issue when using the iphone mail app also?

User-ID / group mapped incorrectly

Hi all,I've wanted to block some sites for specific users and created an AD group on my W2K8 R2 DC. Unfortunatly I have some problems that I haven't encountered before.When checking the user I see the user is a member of my test group, so far so good.> show user user-IDs match-user somedomain.local\testUser Name Vsys ...

ebo by • Not applicable
  • 3575 Views
  • 2 replies
  • 0 Likes

Application Logmein identified but not dropped by rulebase

Hello,Sorry, but I hav implemented a brand New PAN solution with Url cat and AV license.All configuration works find. I have a visitor zone on a DMZ and I want them to access Internet but with my Url Categorisation, so I can't let them use Remote access application.I Have implemented a rulebase with[...]Name "Rule 30"Src Zone "DMZ"Src "DmzUserN...

d_aznar by • Not applicable
  • 2527 Views
  • 1 replies
  • 0 Likes

Resolved! Cannot get OSPF to work through a tunnel interface..

Hello,I have been working on my PA-500 trying to get OSPF to work through an IPSEC site to site VPN.I cannot get OSPF to complete. Looking at the status, I see LSAs sent, but none received.I verified that the other end is configured exactly the same, and even matched them to what I had in my old firewall that I just pulled out.Any help apprecia...

mbehlok by • L0 Member
  • 8939 Views
  • 4 replies
  • 0 Likes

VPN SSL - Verification of a login belonging to a AD group

Hi support,I have a question regarding the authentification of users through the VPN SSL.Here is the situation:Login of the SSL VPN user: AdminLoginPassword of the SSL VPN user: AdminPass SSL VPN name: AdminSSLVPNAuthentication Profile associated with AdminSSLVPN: AdminAuthProfilAdminAuthProfil authentication method: Radius serverAdminAuthProfil...

novidys by • L1 Bithead
  • 6401 Views
  • 7 replies
  • 0 Likes

Site is not loading

Dear All,I failed load below site eventhough the url filtering is off. Any idea? This site is working well in dsl connection.http://www.soti.net/ThanksAsanka

Asanka by • L2 Linker
  • 2116 Views
  • 1 replies
  • 0 Likes

on Palo Alto Certificate create

We create a certificate on our local CA. We want to decrypt traffic in Palo Alto using this certificate. We decided to use the CN as "*" to match all destination hostnames the client will use. We installed the certificate and the intermediate and root certificates on Palo Alto but we could not be able to decrypt the traffic via this certificate....

L2 with Aggregate

Hi We would like to configure L2 with Aggregate between PANOS (4.1 - PA5050) with cisco switch - After we do L2 Aggregate , and assign IP Address on VLAN , we find that when we ping to this IP Address , there are many request-timeout. - If we configure L2 and set IP on VLAN only (without aggregate), there is no problem (Ping smoothly...

apirachat by • Not applicable
  • 2379 Views
  • 1 replies
  • 0 Likes

Filter activesync

Hello,I wonder if the following is possible. (Question from a potential customer).They want to filter/DENY MAIL from the activesync traffic to mobile devices (users in the organzation using phones that are not approved because of security).But they want to ALLOW calendar sync and contacts sync.We already have configured inbound-ssl decryption on...

Resolved! PANOS 4.1 error message: untrust cert is not configured

When I have configured SSL decryption, I always get this warning message when I commit:· Warning: vsys1 decryption: forward decrypt untrust cert is not configured, forward decrypt trust cert will be used instead.· (Module: device)· Configuration committed successfullyHow can I get rid of this message when I haven't configured an SSL unrust certi...

Unable to Run User Activity Report After PAN OS Upgrade

We recently upgraded our appliance to 4.1.3, and now cannot retrieve any data prior to the OS upgrade when running User Activity Reports. My logdb shows that we are near full capacity (but haven't reached the 80% threshold as of yet); however can only pull data from the last reboot of the device - post OS upgrade. If I run a report from the Re...

Resolved! Net Connect Verus Global Protect

What is the difference between the license version and non-license version of the global protect? Is there some documentation on what we would get with the license version verus the non-license version? I would like to have some kind of documentation that show the perks between the two.

HA questions

Hello,I'm having trouble understanding how Active/Passive HA works in Palo Alto. In other solutions the active device has a virtual address on top of its physical interface address, and when the active device goes down the passive device 'takes over' by sending a garp notifying devices that it is now the virtual address receiver. I can find a fl...

u5801 by • Not applicable
  • 11652 Views
  • 10 replies
  • 0 Likes

Change an address to a "shared address"

Is there an easy way to change an address to a shared address for virtuals domains.The only way we found is to clone the address and change every policies where the address is used which is very long !

support by • L1 Bithead
  • 3588 Views
  • 2 replies
  • 0 Likes
  • 24416 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks